<!DOCTYPE html>
<html lang="en">
<head>

    <meta charset="utf-8" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge" />

    <title>为iOS的mobileconfig配置文件进行签名</title>
    <meta name="HandheldFriendly" content="True" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />

    <link rel="stylesheet" type="text/css" href="/assets/built/screen.css?v=d00804aaae" />
    <link rel="stylesheet" type="text/css" href="/assets/css/search.css?v=d00804aaae" />
    <script src="https://cdn.jsdelivr.net/algoliasearch/3/algoliasearchLite.min.js"></script>

    <link rel="shortcut icon" href="/favicon.png" type="image/png" />
    <link rel="canonical" href="https://help.trustasia.com/how-to-deploy-ssl-certificates-on-mobileconfig-file/" />
    <meta name="referrer" content="no-referrer-when-downgrade" />
    <link rel="amphtml" href="https://help.trustasia.com/how-to-deploy-ssl-certificates-on-mobileconfig-file/amp/" />
    
    <meta property="og:site_name" content="亚数信息科技（上海）有限公司" />
    <meta property="og:type" content="article" />
    <meta property="og:title" content="为iOS的mobileconfig配置文件进行签名" />
    <meta property="og:description" content="配置描述文件(.mobileconfig)是XML文件，包含设备安全策略、VPN配置信息、Wi-Fi设置、APN设置、Exchange帐户设置、邮件设置以及允许iPhone和iPod touch与企业系统配合使用的证书。本文描述了苹果开发者如何使用SSL证书对. mobileconfig进行签名，从而确保iOS系统上的app安全性。" />
    <meta property="og:url" content="https://help.trustasia.com/how-to-deploy-ssl-certificates-on-mobileconfig-file/" />
    <meta property="article:published_time" content="2018-08-17T06:59:58.000Z" />
    <meta property="article:modified_time" content="2018-10-16T06:52:41.000Z" />
    <meta property="article:tag" content="SSL" />
    <meta property="article:tag" content="deploy" />
    <meta property="article:tag" content="Mobileconfig" />
    <meta property="article:tag" content="iOS开发" />
    
    <meta name="twitter:card" content="summary" />
    <meta name="twitter:title" content="为iOS的mobileconfig配置文件进行签名" />
    <meta name="twitter:description" content="配置描述文件(.mobileconfig)是XML文件，包含设备安全策略、VPN配置信息、Wi-Fi设置、APN设置、Exchange帐户设置、邮件设置以及允许iPhone和iPod touch与企业系统配合使用的证书。本文描述了苹果开发者如何使用SSL证书对. mobileconfig进行签名，从而确保iOS系统上的app安全性。" />
    <meta name="twitter:url" content="https://help.trustasia.com/how-to-deploy-ssl-certificates-on-mobileconfig-file/" />
    <meta name="twitter:label1" content="Written by" />
    <meta name="twitter:data1" content="Jessica Zhang" />
    <meta name="twitter:label2" content="Filed under" />
    <meta name="twitter:data2" content="SSL, deploy, Mobileconfig, iOS开发" />
    
    <script type="application/ld+json">
{
    "@context": "https://schema.org",
    "@type": "Article",
    "publisher": {
        "@type": "Organization",
        "name": "亚数信息科技（上海）有限公司",
        "logo": {
            "@type": "ImageObject",
            "url": "https://help.trustasia.com/favicon.png",
            "width": 60,
            "height": 60
        }
    },
    "author": {
        "@type": "Person",
        "name": "Jessica Zhang",
        "url": "https://help.trustasia.com/author/jessica/",
        "sameAs": []
    },
    "headline": "为iOS的mobileconfig配置文件进行签名",
    "url": "https://help.trustasia.com/how-to-deploy-ssl-certificates-on-mobileconfig-file/",
    "datePublished": "2018-08-17T06:59:58.000Z",
    "dateModified": "2018-10-16T06:52:41.000Z",
    "keywords": "SSL, deploy, Mobileconfig, iOS开发",
    "description": "配置描述文件(.mobileconfig)是XML文件，包含设备安全策略、VPN配置信息、Wi-Fi设置、APN设置、Exchange帐户设置、邮件设置以及允许iPhone和iPod touch与企业系统配合使用的证书。本文描述了苹果开发者如何使用SSL证书对. mobileconfig进行签名，从而确保iOS系统上的app安全性。",
    "mainEntityOfPage": {
        "@type": "WebPage",
        "@id": "https://help.trustasia.com/"
    }
}
    </script>

    <script src="/public/ghost-sdk.min.js?v=d00804aaae"></script>
<script>
ghost.init({
	clientId: "ghost-frontend",
	clientSecret: "b5a469141d2f"
});
</script>
    <meta name="generator" content="Ghost 1.25" />
    <link rel="alternate" type="application/rss+xml" title="亚数信息科技（上海）有限公司" href="https://help.trustasia.com/rss/" />

</head>
<body class="post-template tag-ssl tag-deploy tag-mobileconfig tag-ioskai-fa">

    <div class="site-wrapper">

        

<header class="site-header outer">
    <div class="inner">
        <nav class="site-nav">
    <div class="site-nav-left">
                <a class="site-nav-logo" href="https://help.trustasia.com">亚数信息科技（上海）有限公司</a>
            <ul class="nav" role="menu">
    <li class="nav-" role="menuitem"><a href="https://trustasia.com">官网</a></li>
    <li class="nav-ssl" role="menuitem"><a href="https://help.trustasia.com/ssl/">SSL</a></li>
    <li class="nav-smime" role="menuitem"><a href="https://help.trustasia.com/smime/">S/MIME</a></li>
    <li class="nav-" role="menuitem"><a href="https://help.trustasia.com/code-signing/">代码签名</a></li>
    <li class="nav-" role="menuitem"><a href="https://help.trustasia.com/doc-signing/">文档签名</a></li>
    <li class="nav-mpki" role="menuitem"><a href="https://help.trustasia.com/mpki/">MPKI</a></li>
</ul>

    </div>
    <div class="help-search">
        <div class="help-search-hidden">
            <input id="search" type="text" oninput="algolia()" placeholder="请输入搜索内容">
            <i class=" help-icon" onclick="notSearch()" ><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 1000 1000" enable-background="new 0 0 1000 1000" xml:space="preserve">
<metadata> Svg Vector Icons : http://www.sfont.cn </metadata>
<g><g><path d="M688.5,424.6c0-72.6-25.8-134.8-77.4-186.4s-113.8-77.4-186.4-77.4s-134.8,25.8-186.4,77.4S160.8,352,160.8,424.6c0,72.6,25.8,134.8,77.4,186.4c51.6,51.6,113.8,77.4,186.4,77.4S559.4,662.6,611,611C662.6,559.4,688.5,497.3,688.5,424.6L688.5,424.6z M990,914.6c0,20.4-7.5,38.1-22.4,53c-14.9,14.9-32.6,22.4-53,22.4c-21.2,0-38.9-7.5-53-22.4l-202-201.4c-70.3,48.7-148.6,73-235,73c-56.1,0-109.8-10.9-161.1-32.7s-95.4-51.2-132.5-88.3c-37.1-37.1-66.5-81.3-88.3-132.5C20.9,534.5,10,480.8,10,424.6s10.9-109.8,32.7-161.1S93.9,168.1,131,131c37.1-37.1,81.3-66.6,132.5-88.3S368.5,10,424.6,10s109.8,10.9,161.1,32.7c51.2,21.8,95.4,51.2,132.5,88.3c37.1,37.1,66.6,81.3,88.3,132.5c21.8,51.2,32.7,104.9,32.7,161.1c0,86.4-24.3,164.7-73,235l202,202C982.7,876.1,990,893.8,990,914.6L990,914.6z"/></g></g>
</svg></i>
        </div>
        <i class="help-icon-black"  onclick="searchToggle();"><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 1000 1000" enable-background="new 0 0 1000 1000" xml:space="preserve">
<metadata> Svg Vector Icons : http://www.sfont.cn </metadata>
<g><g><path d="M688.5,424.6c0-72.6-25.8-134.8-77.4-186.4s-113.8-77.4-186.4-77.4s-134.8,25.8-186.4,77.4S160.8,352,160.8,424.6c0,72.6,25.8,134.8,77.4,186.4c51.6,51.6,113.8,77.4,186.4,77.4S559.4,662.6,611,611C662.6,559.4,688.5,497.3,688.5,424.6L688.5,424.6z M990,914.6c0,20.4-7.5,38.1-22.4,53c-14.9,14.9-32.6,22.4-53,22.4c-21.2,0-38.9-7.5-53-22.4l-202-201.4c-70.3,48.7-148.6,73-235,73c-56.1,0-109.8-10.9-161.1-32.7s-95.4-51.2-132.5-88.3c-37.1-37.1-66.5-81.3-88.3-132.5C20.9,534.5,10,480.8,10,424.6s10.9-109.8,32.7-161.1S93.9,168.1,131,131c37.1-37.1,81.3-66.6,132.5-88.3S368.5,10,424.6,10s109.8,10.9,161.1,32.7c51.2,21.8,95.4,51.2,132.5,88.3c37.1,37.1,66.6,81.3,88.3,132.5c21.8,51.2,32.7,104.9,32.7,161.1c0,86.4-24.3,164.7-73,235l202,202C982.7,876.1,990,893.8,990,914.6L990,914.6z"/></g></g>
</svg></i>
    </div>
</nav>
    <div id="result" class="help-result help-result-hidden">

    </div>

<script>
    function searchToggle() {
        $(".help-search-hidden").addClass('help-search-block');
        $(".help-icon-black").addClass('help-search-hidden');
        $("#search").animate({
            width:'255px'
        },200);
        $('#search').focus();
    }
    function notSearch() {

        $("#search").animate({
            width:'0px'
        },200,function () {
            $(".help-search-hidden").removeClass('help-search-block');
            $(".help-icon-black").removeClass('help-search-hidden');
            $(".help-result").html('');
            $(".help-result").addClass("help-result-hidden");
            $("#search").val('');
        });
       
    }
    function algolia(){
        var client = algoliasearch('D7HQ2P5RTX', 'ce1e49d37941794705f81589f8052d01');
        var index = client.initIndex('help');
        var query = $('#search').val();
        if(query == '') {
            $(".help-result").html('');
            $(".help-result").addClass("help-result-hidden");
        } else {
            var html ='';
            index.search({query: query,hitsPerPage:1000},
                    function searchDone(err, content) {
                        if (err) throw err;
                        var data = content.hits;
                        if(data == ''){
                            html += "<a class=\"help-result-one-of\">\n" +
                                    "<div>\n" +
                                    "<div class=\"help-title\">暂未搜索到该文章</div>\n" +
                                    "</div>\n" +
                                    "</a>"
                        } else {

                                let result = {};
                                let finalResult=[];
                                for(let i=0;i<data.length;i++){
                                    result[data[i].post_title]=data[i];
                                }
                                for(item in result){
                                    finalResult.push(result[item]);
                                }


                            finalResult.forEach(function( val, index ) {
                                //val.content.substring(0,100);
                                if(val.content != undefined ){
                                    var content  =val.content.substring(0,80);
                                    var id = val.id;
                                    var href = '';
                                    if(id.indexOf('#') == -1){
                                        href = id;
                                    }else{
                                        href = id.substring(0, id.indexOf('#'));
                                    }

                                    html += " <a href='/"+ href +"'  class=\"help-result-one-of\">" +
                                            " <div>" +
                                            "<div class=\"help-title\">" + val.post_title +"</div>" +
                                            "<div class=\"help-content\"> " + content + "..." + " </div>" +
                                            "</div>" +
                                            "</a>";
                                }else{
                                    html += "<a class=\"help-result-one-of\">\n" +
                                            "<div>\n" +
                                            "<div class=\"help-title\">暂未搜索到该文章</div>\n" +
                                            "</div>\n" +
                                            "</a>"
                                }


                            });
                        }


                        $(".help-result").html(html);
                        $(".help-result").removeClass("help-result-hidden");
                    }
            );

        }

    }

    window.onload=function(){
        var result = document.getElementById("result");
        document.addEventListener("click",function(){
            $(".help-result").html('');
            $(".help-result").addClass("help-result-hidden");
        });
    };



</script>    </div>
</header>


<main id="site-main" class="site-main outer">
    <div class="inner">

        <article class="post-full post tag-ssl tag-deploy tag-mobileconfig tag-ioskai-fa no-image">

            <header class="post-full-header">
                <section class="post-full-meta">
                    <time class="post-full-meta-date" datetime="2018-08-17">2018-08-17</time>
                        <span class="date-divider">/</span> <a href="/tag/ssl/">SSL</a>
                </section>
                <h1 class="post-full-title">为iOS的mobileconfig配置文件进行签名</h1>
            </header>


            <section class="post-full-content">
                <div class="anchors kg-card-markdown">

                </div>
                <div class="post-content">
                    <div class="kg-card-markdown"><p><strong>配置描述文件(.mobileconfig)</strong> 是XML文件，包含设备安全策略、VPN配置信息、Wi-Fi设置、APN设置、Exchange帐户设置、邮件设置以及允许iPhone和iPod touch与企业系统配合使用的证书。本文描述了苹果开发者如何使用SSL证书对. mobileconfig进行签名，从而确保iOS系统上的app安全性。</p>
<h3 id="">前提条件</h3>
<ul>
<li>确保已经获取SSL数字证书。有关获取数字证书方法，可参阅<a href="/how-to-get-digital-certificates">如何获取数字证书</a>。</li>
<li>本文使用的SSL证书文件名为<code>mbaike.crt</code>。</li>
<li>与SSL证书对应的私钥。本文使用的私钥文件名为<code>mbaike.key</code>。</li>
<li>与SSL证书对应的证书链（中级证书）。本文使用的证书链文件名为<code>ca.-bundle.pem</code>。</li>
<li>iOS端生成的未签名的需要签名的<code>.mobleconfig</code>文件。 本文使用的文件名为<code>unsigned.mobileconfig</code>。</li>
<li>OpenSSL 1.0及以上版本。</li>
</ul>
<h3 id="">如何签名</h3>
<h4 id="">生成已签名配置文件</h4>
<p>在linux操作系统上，通过运行OpenSSL命令行，生成签名后的<code>signed.mobileconfig</code>文件。</p>
<pre><code class="language-Bash">[root@VM_0_4_centos home]#openssl smime -sign -in unsigned.mobileconfig -out signed.mobileconfig -signer mbaike.crt -inkey mbaike.key -certfile ca-bundle.pem -outform der -nodetach
</code></pre>
<h4 id="">输入私钥密码</h4>
<p>将证书私钥key文件的密码写入到生成的key文件中</p>
<pre><code class="language-Bash">[root@VM_0_4_centos home]#openssl rsa -in mbaike.key -out mbaikenopass.key
</code></pre>
<h4 id="">写入签名</h4>
<pre><code class="language-Bash">[root@VM_0_4_centos home]#openssl smime -sign -in unsigned.mobileconfig -out signed.mobileconfig -signer mbaike.crt -inkey mbaikenopass.key -certfile ca-bundle.pem -outform der -nodetach
</code></pre>
<h4 id="">签名效果</h4>
<ul>
<li><code>.mobileconfig</code>配置描述文件签名前<br>
<img src="/content/images/2018/08/006tKfTcgy1fqfhp4xqraj30zg0ny75a.jpg" alt="未签名的效果图"></li>
<li><code>.mobileconfig</code>配置描述文件签名后<br>
<img src="/content/images/2018/08/006tKfTcgy1fqfhppdrrzj310g0oidgw.jpg" alt="签名后的效果图"></li>
</ul>
</div>
                </div>
            </section>


            <footer class="post-full-footer">


                    
<section class="author-card">
        <span class="avatar-wrapper"><svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M3.513 18.998C4.749 15.504 8.082 13 12 13s7.251 2.504 8.487 5.998C18.47 21.442 15.417 23 12 23s-6.47-1.558-8.487-4.002zM12 12c2.21 0 4-2.79 4-5s-1.79-4-4-4-4 1.79-4 4 1.79 5 4 5z" fill="#FFF"/></g></svg>
</span>
    <section class="author-card-content">
        <h4 class="author-card-name"><a href="/author/jessica/">Jessica Zhang</a></h4>
            <p>Read <a href="/author/jessica/">more posts</a> by this author.</p>
    </section>
</section>
<div class="post-full-footer-right">
    <a class="author-card-button" href="/author/jessica/">Read More</a>
</div>


            </footer>


        </article>

    </div>
</main>

<aside class="read-next outer">
    <div class="inner">
        <div class="read-next-feed">
                <article class="read-next-card"
                            style="background-image: url(/content/images/2018/09/KB-banner2-1.jpeg)"
                >
                    <header class="read-next-card-header">
                        <small class="read-next-card-header-sitetitle">&mdash; 亚数信息科技（上海）有限公司 &mdash;</small>
                        <h3 class="read-next-card-header-title"><a href="/tag/ssl/">SSL</a></h3>
                    </header>
                    <div class="read-next-divider"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M13 14.5s2 3 5 3 5.5-2.463 5.5-5.5S21 6.5 18 6.5c-5 0-7 11-12 11C2.962 17.5.5 15.037.5 12S3 6.5 6 6.5s4.5 3.5 4.5 3.5"/></svg>
</div>
                    <div class="read-next-card-content">
                        <ul>
                            <li><a href="/how-to-deploy-ssl-certificates-on-tomcat-8-5-and-eaier/">在Tomcat 8.5及之前版本的服务器上部署SSL证书</a></li>
                            <li><a href="/index-of-csr-generation/">CSR文件生成指南</a></li>
                            <li><a href="/index-of-ssl-deployment/">部署SSL证书指南</a></li>
                        </ul>
                    </div>
                    <footer class="read-next-card-footer">
                        <a href="/tag/ssl/">See all 21 posts →</a>
                    </footer>
                </article>

                <article class="post-card post tag-glossary tag-ci-hui-biao no-image">
    <div class="post-card-content">
        <a class="post-card-content-link" href="/what-is-content-security-policy/">
            <header class="post-card-header">
                    <span class="post-card-tags">glossary</span>
                <h2 class="post-card-title">Content Security Policy</h2>
            </header>
            <section class="post-card-excerpt">
                <p>内容安全策略（CSP） Content Security Policy（CSP）指的是内容安全策略，为了缓解很大一部分潜在的跨站脚本问题，浏览器的扩展程序系统引入了内容安全策略（CSP）的一般概念。这将引入一些相当严格的策略，会使扩展程序在默认情况下更加安全，开发者可以创建并强制应用一些规则，管理网站允许加载的内容。 目的 缓解潜在的跨站脚本问题。 优点 使扩展程序在默认情况下更加安全。 CSP 以白名单的机制对网站加载或执行的资源起作用。在网页中，这样的策略通过HTTP头信息或者meta元素定义。 CSP虽然提供了强大的安全保护，但是也造成了如下问题：Eval及相关函数被禁用、内嵌的JavaScript代码将不会执行、只能通过白名单来加载远程脚本。这些问题阻碍CSP的普及，如果要使用CSP技术保护自己的网站，开发者就不得不花费大量时间分离内嵌的JavaScript代码和做一些调整，参考文献汇总的Content  Security</p>
            </section>
        </a>
        <footer class="post-card-meta">

            <ul class="author-list">
                <li class="author-list-item">

                    <div class="author-name-tooltip">
                        Jessica Zhang
                    </div>

                        <a href="/author/jessica/" class="static-avatar author-profile-image"><svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M3.513 18.998C4.749 15.504 8.082 13 12 13s7.251 2.504 8.487 5.998C18.47 21.442 15.417 23 12 23s-6.47-1.558-8.487-4.002zM12 12c2.21 0 4-2.79 4-5s-1.79-4-4-4-4 1.79-4 4 1.79 5 4 5z" fill="#FFF"/></g></svg>
</a>
                </li>
            </ul>

            <span class="reading-time">1 min read</span>

        </footer>
    </div>
</article>

                <article class="post-card post tag-csr tag-generate tag-netscaler tag-fu-zai-jun-heng-fu-wu-qi no-image">
    <div class="post-card-content">
        <a class="post-card-content-link" href="/how-to-generate-csr-file-by-using-netscaler/">
            <header class="post-card-header">
                    <span class="post-card-tags">CSR</span>
                <h2 class="post-card-title">在Netscaler负载均衡设备上生成CSR文件</h2>
            </header>
            <section class="post-card-excerpt">
                <p>Citrix Netscaler是思杰系统公司旗下的一款负载均衡产品，在Netscaler上可以进行SSL卸载，来缓解服务器压力。本文详细介绍了在证书生成前，如何通过Netscaler生成Certificate Signing Request（CSR）证书签名请求文件。 适用对象 本文适用于Netscaler管理员、证书申请人员。 适用版本 Citrix NetScaler VPX 10.5及以上版本 Citrix NetScaler VPX 10.1及以上版本 Citrix NetScaler VPX 10.0及以上版本 Citrix NetScaler VPX 9.</p>
            </section>
        </a>
        <footer class="post-card-meta">

            <ul class="author-list">
                <li class="author-list-item">

                    <div class="author-name-tooltip">
                        Jessica Zhang
                    </div>

                        <a href="/author/jessica/" class="static-avatar author-profile-image"><svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M3.513 18.998C4.749 15.504 8.082 13 12 13s7.251 2.504 8.487 5.998C18.47 21.442 15.417 23 12 23s-6.47-1.558-8.487-4.002zM12 12c2.21 0 4-2.79 4-5s-1.79-4-4-4-4 1.79-4 4 1.79 5 4 5z" fill="#FFF"/></g></svg>
</a>
                </li>
            </ul>

            <span class="reading-time">3 min read</span>

        </footer>
    </div>
</article>

        </div>
    </div>
</aside>

<div class="floating-header">
    <div class="floating-header-logo">
        <a href="https://help.trustasia.com">
                <img src="/content/images/2018/10/favicon-64x64---.png" alt="亚数信息科技（上海）有限公司 icon" />
            <span>亚数信息科技（上海）有限公司</span>
        </a>
    </div>
    <span class="floating-header-divider">&mdash;</span>
    <div class="floating-header-title">为iOS的mobileconfig配置文件进行签名</div>
    <div class="floating-header-share">
        <div class="floating-header-share-label">分享此文章 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
    <path d="M7.5 15.5V4a1.5 1.5 0 1 1 3 0v4.5h2a1 1 0 0 1 1 1h2a1 1 0 0 1 1 1H18a1.5 1.5 0 0 1 1.5 1.5v3.099c0 .929-.13 1.854-.385 2.748L17.5 23.5h-9c-1.5-2-5.417-8.673-5.417-8.673a1.2 1.2 0 0 1 1.76-1.605L7.5 15.5zm6-6v2m-3-3.5v3.5m6-1v2"/>
</svg>
</div>
        <a class="floating-header-share-tw" href="http://v.t.sina.com.cn/share/share.php?title=%E4%B8%BAiOS%E7%9A%84mobileconfig%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6%E8%BF%9B%E8%A1%8C%E7%AD%BE%E5%90%8D&url=https://help.trustasia.com/how-to-deploy-ssl-certificates-on-mobileconfig-file/&content=utf-8&sourceUrl=https://help.trustasia.com/how-to-deploy-ssl-certificates-on-mobileconfig-file/"
        onclick="window.open(this.href, '微博分享', 'height=400,width=400,top=100,left=100');return false;">
        <svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 1000 1000" enable-background="new 0 0 1000 1000" xml:space="preserve">
<metadata> Svg Vector Icons : http://www.sfont.cn </metadata>
<g><g transform="translate(0.000000,520.000000) scale(0.100000,-0.100000)"><path d="M7034.4,4157.5c-131.8-13.8-315.7-55.2-369.3-81.2c-116.5-59.8-197.7-196.2-197.7-331c0-111.9,29.1-177.8,113.4-260.5c122.6-119.5,185.4-130.3,484.3-82.8c544.1,84.3,1167.8-133.3,1564.7-545.6c467.4-487.4,628.4-1149.4,442.9-1819.2c-36.8-130.3-38.3-185.4-7.7-269.7c98.1-278.9,470.5-343.3,646.7-110.4c133.3,173.2,223.8,800,174.7,1206.1c-52.1,423-191.6,801.5-421.5,1147.9C9039,3648.7,8373.8,4056.4,7601.4,4151.4C7480.3,4166.7,7153.9,4169.8,7034.4,4157.5z"/><path d="M4022.8,3038.8c-608.4-78.2-1341-464.4-2076.6-1092.7c-205.4-174.7-646.8-620.7-813.8-819.9C592.9,482.4,266.5-127.5,142.3-719.1c-50.6-243.7-56.7-608.4-13.8-806.1c122.6-564,473.6-1036,1059-1428.4c599.2-401.5,1356.3-660.5,2283.5-781.6c308-39.8,1192.3-39.8,1501.9,0c1077.4,139.5,2004.6,505.8,2697.3,1068.2c392.3,317.2,718.8,734.1,864.4,1109.6c88.9,228.3,113.4,370.9,105.7,613c-6.1,174.7-12.3,217.6-53.6,334.1c-147.1,421.5-522.6,746.4-1086.6,941c-90.4,32.2-177.8,70.5-193.1,85.8c-38.3,38.3-35.2,98.1,16.9,237.6c65.9,180.8,95,332.6,95,495c1.5,320.3-128.7,524.1-416.8,657.5c-139.5,64.4-301.9,93.5-528.7,93.5c-355.6,0-724.9-78.2-1192.4-251.3c-409.2-153.3-452.1-139.5-377,121.1c194.6,674.3,6.1,1149.4-501.2,1256.7C4306.4,3048,4131.7,3052.6,4022.8,3038.8z M4620.5,674C5809.8,572.8,6720.2,1.2,6928.6-775.8c47.5-177.8,49-470.5,0-649.8c-167.1-628.4-752.5-1181.6-1596.9-1508.1c-795.4-306.5-1751.7-367.8-2559.4-162.5c-518,131.8-1020.7,407.7-1296.6,712.7c-292.7,323.4-436.8,728-389.3,1095.8c78.2,613,531.8,1155.6,1281.2,1535.6C3028.2,582,3855.8,738.4,4620.5,674z"/><path d="M3636.6-129.1C2970-256.3,2433.6-722.2,2297.2-1295.4c-46-196.2-36.8-469,23-643.7c226.8-668.2,1013-1023.8,1810-819.9c594.6,151.7,1075.9,606.9,1203.1,1137.2c41.4,171.7,41.4,410.7,0,570.1c-107.3,423-475.1,767.8-957.9,898.1C4217.5-110.7,3805.2-96.9,3636.6-129.1z M4235.9-1027.2c52.1-19.9,88.9-79.7,88.9-147.1c0-104.2-111.9-205.4-228.4-205.4c-58.2,0-78.2,9.2-121.1,52.1c-61.3,61.3-69,127.2-21.5,205.4C4012.1-1028.7,4131.7-987.3,4235.9-1027.2z M3566.1-1264.7c104.2-30.7,219.2-134.9,265.1-240.6c95-222.2-38.3-519.5-292.7-642.1c-282-137.9-582.4-62.9-706.5,176.2c-50.6,96.6-47.5,265.1,6.1,380.1c70.5,150.2,216.1,274.3,387.7,328C3310.2-1235.6,3472.6-1237.1,3566.1-1264.7z"/><path d="M7111,2825.7c-108.8-21.5-185.4-58.2-234.5-111.9c-144.1-159.4-104.2-404.6,81.2-504.2c65.9-33.7,78.2-35.3,245.2-26.1c151.7,7.7,190,4.6,275.9-21.5c324.9-101.2,507.3-424.5,423-746.4c-13.8-52.1-24.5-118-24.5-147.1c0-79.7,67.4-200.8,139.5-251.3c131.8-90.4,343.3-59.8,438.3,64.4c88.9,116.5,134.9,452.1,96.5,691.2C8475,2255.6,8121,2652.6,7645.9,2789C7534,2821.1,7207.5,2844.1,7111,2825.7z"/></g></g>
</svg>        </a>

        <!--<a class="floating-header-share-tw" href="https://twitter.com/share?text=%E4%B8%BAiOS%E7%9A%84mobileconfig%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6%E8%BF%9B%E8%A1%8C%E7%AD%BE%E5%90%8D&amp;url=https://help.trustasia.com/how-to-deploy-ssl-certificates-on-mobileconfig-file/"-->
            <!--onclick="window.open(this.href, 'share-twitter', 'width=550,height=235');return false;">-->
            <!--<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32"><path d="M30.063 7.313c-.813 1.125-1.75 2.125-2.875 2.938v.75c0 1.563-.188 3.125-.688 4.625a15.088 15.088 0 0 1-2.063 4.438c-.875 1.438-2 2.688-3.25 3.813a15.015 15.015 0 0 1-4.625 2.563c-1.813.688-3.75 1-5.75 1-3.25 0-6.188-.875-8.875-2.625.438.063.875.125 1.375.125 2.688 0 5.063-.875 7.188-2.5-1.25 0-2.375-.375-3.375-1.125s-1.688-1.688-2.063-2.875c.438.063.813.125 1.125.125.5 0 1-.063 1.5-.25-1.313-.25-2.438-.938-3.313-1.938a5.673 5.673 0 0 1-1.313-3.688v-.063c.813.438 1.688.688 2.625.688a5.228 5.228 0 0 1-1.875-2c-.5-.875-.688-1.813-.688-2.75 0-1.063.25-2.063.75-2.938 1.438 1.75 3.188 3.188 5.25 4.25s4.313 1.688 6.688 1.813a5.579 5.579 0 0 1 1.5-5.438c1.125-1.125 2.5-1.688 4.125-1.688s3.063.625 4.188 1.813a11.48 11.48 0 0 0 3.688-1.375c-.438 1.375-1.313 2.438-2.563 3.188 1.125-.125 2.188-.438 3.313-.875z"/></svg>
-->
        <!--</a>-->
        <!--<a class="floating-header-share-fb" href="https://www.facebook.com/sharer/sharer.php?u=https://help.trustasia.com/how-to-deploy-ssl-certificates-on-mobileconfig-file/"-->
            <!--onclick="window.open(this.href, 'share-facebook','width=580,height=296');return false;">-->
            <!--<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32"><path d="M19 6h5V0h-5c-3.86 0-7 3.14-7 7v3H8v6h4v16h6V16h5l1-6h-6V7c0-.542.458-1 1-1z"/></svg>
-->
        <!--</a>-->
    </div>
    <progress class="progress" value="0">
        <div class="progress-container">
            <span class="progress-bar"></span>
        </div>
    </progress>
</div>




        <footer class="site-footer outer">
            <div class="site-footer-content inner">
                <section class="copyright"><a href="https://help.trustasia.com">亚数信息科技（上海）有限公司</a> &copy; 2021</section>
                <nav class="site-footer-nav">
                    <!--<a href="https://help.trustasia.com">Latest Posts</a>-->
                    <!---->
                    <!---->
                    <a href="https://www.trustasia.com" target="_blank" rel="noopener">TrustAsia</a>
                </nav>
            </div>
        </footer>

    </div>


    <script
        src="https://code.jquery.com/jquery-3.2.1.min.js"
        integrity="sha256-hwg4gsxgFZhOsEEamdOYGBf13FyQuiTwlAQgxVSNgt4="
        crossorigin="anonymous">
    </script>
    <script type="text/javascript" src="/assets/js/jquery.fitvids.js?v=d00804aaae"></script>


    <script>
//锚点

var post_title = $('.post-full-title').html();
if(post_title == 'SSL证书' || post_title == 'S/MIME邮件签名证书' || post_title == '代码签名证书' || post_title == '文档签名证书' || post_title == 'MPKI'){
    $('.anchors').addClass('anchors-hidden ');
}else{
    //html 锚点
    var content = $('.post-content').html();
    var hlable = content.match(/<h\d.*>.*<\/h\d>/ig);
    var html = "";
    if(hlable != null) {
        hlable.forEach(function (value) {
            var lable = value.match(/<\/h(\S*)>/)[1];
            var title = value.match(/>(.*)</)[1];
            var id = title.replace(/\s+/g,"");
            var newlable = "<h" +lable + " class='htitle' id='"+ id +"'>" + title +"</h" + lable + ">";
            content = content.replace(value,newlable);
            switch (lable){
                case '3':
                    var attr = "anchors-one";
                    break;
                case '4':
                    var attr = "anchors-tow";
                    break;
                case '5':
                    var attr = "anchors-three";
                    break;

            }
            html += "<dd class="+ attr + "><a href=#"+ id +"># "+ title +"</a></dd>";
        });
        $('.anchors').html(html);
        $(".post-content").empty();
        $(".post-content").append(content);
    }else{
        $('.anchors').addClass('anchors-hidden ');
    }
}

// NOTE: Scroll performance is poor in Safari
// - this appears to be due to the events firing much more slowly in Safari.
//   Dropping the scroll event and using only a raf loop results in smoother
//   scrolling but continuous processing even when not scrolling
$(document).ready(function () {
    // Start fitVids
    var $postContent = $(".post-full-content");
    $postContent.fitVids();
    // End fitVids

    var progressBar = document.querySelector('progress');
    var header = document.querySelector('.floating-header');
    var title = document.querySelector('.post-full-title');

    var lastScrollY = window.scrollY;
    var lastWindowHeight = window.innerHeight;
    var lastDocumentHeight = $(document).height();
    var ticking = false;

    function onScroll() {
        lastScrollY = window.scrollY;
        requestTick();
    }

    function onResize() {
        lastWindowHeight = window.innerHeight;
        lastDocumentHeight = $(document).height();
        requestTick();
    }

    function requestTick() {
        if (!ticking) {
            requestAnimationFrame(update);
        }
        ticking = true;
    }

    function update() {
        var trigger = title.getBoundingClientRect().top + window.scrollY;
        var triggerOffset = title.offsetHeight + 35;
        var progressMax = lastDocumentHeight - lastWindowHeight;

        // show/hide floating header
        if (lastScrollY >= trigger + triggerOffset) {
            header.classList.add('floating-active');
        } else {
            header.classList.remove('floating-active');
        }

        progressBar.setAttribute('max', progressMax);
        progressBar.setAttribute('value', lastScrollY);

        ticking = false;
    }

    window.addEventListener('scroll', onScroll, {passive: true});
    window.addEventListener('resize', onResize, false);

    update();

});
</script>


    

</body>
</html>
